$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json) Hash identifier: vE6SvMkmt7jPn4WiPO6BThStT84YHEDYPeLk8XkyvXg= Subject key identifier: E8:9E:4E:D9:43:86:45:2C:33:9D:61:7C:60:DB:25:DE:DE:92:45:4B Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft Manifest number: 80 Signing time: Fri 05 Sep 2025 07:09:09 +0000 Manifest this update: Fri 05 Sep 2025 07:09:08 +0000 Manifest next update: Fri 12 Sep 2025 07:09:08 +0000 Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: imXiqZptRsr4SywVYSxkl5IIycQHlp92fOS4CGZfuSI=) 2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: McJ+hP8GUu/Ld5Rarq2qGp1xUtwodZVqiVkbBVRJzkE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816 Validity Not Before: Sep 5 07:09:08 2025 GMT Not After : Sep 12 07:09:08 2025 GMT Subject: CN=68ba8c95-f3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:de:3e:77:cb:a9:b6:f4:e7:7e:48:8e:5a:bb: 01:c6:81:32:4b:e8:49:79:75:2f:52:ae:d7:cb:ef: 6c:cd:fb:12:cd:22:7e:90:98:f8:8e:1b:e9:ba:7b: 4f:4f:10:57:4e:20:80:f6:21:59:0f:fe:56:46:35: f7:d3:d2:f0:94:fd:59:cd:ee:99:bd:62:bc:65:c4: 60:8a:8d:7e:9a:ff:7f:83:dc:36:a4:83:15:b0:f9: b6:25:9d:89:62:14:4c:a4:c1:38:14:b4:10:a2:ee: 76:d5:a8:e8:db:7f:7b:ca:29:96:f5:85:cd:f8:4f: ef:7f:8b:51:de:11:32:d9:d4:0a:a3:a9:e0:1a:a1: 16:39:87:b8:8e:02:8e:b0:4b:0c:94:47:92:41:78: 30:66:ac:52:78:07:8e:2f:5e:d7:32:70:ba:64:a5: e6:d9:3c:55:41:16:57:b4:ce:89:8f:0f:cb:7b:4e: 95:1d:de:98:00:8e:c6:12:9c:11:88:0a:af:f1:f2: 03:2e:ae:b9:52:f7:fe:35:47:fa:ee:66:d7:40:86: 99:af:cd:d6:6f:c0:56:7e:a2:e9:4a:96:bd:f1:67: ac:d8:5b:3d:d5:2c:43:90:9e:55:aa:e3:de:16:73: 5f:47:10:e7:7b:fa:18:b1:b8:dc:21:31:31:a6:98: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9E:4E:D9:43:86:45:2C:33:9D:61:7C:60:DB:25:DE:DE:92:45:4B X509v3 Authority Key Identifier: keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:70:34:9c:72:f4:53:1f:d0:ec:2d:0e:2f:db:e4:af:d0:a2: 42:d0:3a:a1:47:a9:4a:a0:4a:13:d7:d5:d6:c9:b6:93:d3:e5: 5c:88:c0:d3:b2:1a:10:ff:ed:31:0b:b2:66:5e:3e:87:a7:04: fb:4e:a1:51:24:0f:c9:a0:8f:eb:92:58:45:de:bc:b8:40:3c: d0:ae:ca:c4:88:a4:59:b2:69:56:46:c5:0e:ef:dc:ad:8f:f5: 04:f5:7e:9f:28:e6:ed:2a:78:13:d3:c4:4e:71:c4:87:bb:48: c8:28:d2:28:87:a6:a4:06:83:1c:88:e7:55:b7:b7:5e:01:ab: 2d:a3:0f:2f:bb:6d:7d:1d:f1:51:2a:50:1f:27:8f:2f:fd:7e: 64:ba:cd:5f:39:3e:f9:ee:f3:63:2a:d7:eb:9c:d9:67:02:47: c8:79:c1:bf:1e:08:1b:9e:ae:1c:69:c7:07:2b:bc:34:4a:5d: ca:76:a6:38:9b:5b:fc:c0:b4:f8:f4:fa:8d:26:81:9b:04:03: 1e:35:7c:ae:3e:36:b5:3f:bd:6d:72:84:0b:7d:b3:4f:f9:bc: f7:2a:08:02:76:7b:64:df:b8:ac:a3:09:8e:60:0e:c9:32:28: ba:7e:3e:3f:5c:7d:23:61:39:c1:d0:82:a2:03:01:bb:65:24: c9:a2:66:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1MzYxMTAvBgNVBAUTKDJBRTk4NTgxNUExMERENkQwNDUyM0ZDODFEOERBRkQ3 MjZCRTc4MTYwHhcNMjUwOTA1MDcwOTA4WhcNMjUwOTEyMDcwOTA4WjAYMRYwFAYD VQQDEw02OGJhOGM5NS1mM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7t4+d8uptvTnfkiOWrsBxoEyS+hJeXUvUq7Xy+9szfsSzSJ+kJj4jhvpuntP TxBXTiCA9iFZD/5WRjX309LwlP1Zze6ZvWK8ZcRgio1+mv9/g9w2pIMVsPm2JZ2J YhRMpME4FLQQou521ajo2397yimW9YXN+E/vf4tR3hEy2dQKo6ngGqEWOYe4jgKO sEsMlEeSQXgwZqxSeAeOL17XMnC6ZKXm2TxVQRZXtM6Jjw/Le06VHd6YAI7GEpwR iAqv8fIDLq65Uvf+NUf67mbXQIaZr83Wb8BWfqLpSpa98Wes2Fs91SxDkJ5VquPe FnNfRxDne/oYsbjcITExppilbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOieTtlD hkUsM51hfGDbJd7ekkVLMB8GA1UdIwQYMBaAFCrphYFaEN1tBFI/yB2Nr9cmvngW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjUzNi85QTg2REJEMEM5 OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNXMEVVal9JSFkydjF5YS1l QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjUzNi85QTg2REJEMEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9LdW1GZ1ZvUTNX MEVVal9JSFkydjF5YS1lQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8cDSccvRTH9DsLQ4v2+Sv0KJC0DqhR6lKoEoT19XWybaT0+VciMDT shoQ/+0xC7JmXj6HpwT7TqFRJA/JoI/rklhF3ry4QDzQrsrEiKRZsmlWRsUO79yt j/UE9X6fKObtKngT08ROccSHu0jIKNIoh6akBoMciOdVt7deAastow8vu219HfFR KlAfJ48v/X5kus1fOT757vNjKtfrnNlnAkfIecG/Hggbnq4caccHK7w0Sl3KdqY4 m1v8wLT49PqNJoGbBAMeNXyuPja1P71tcoQLfbNP+bz3KggCdntk37isowmOYA7J Mii6fj4/XH0jYTnB0IKiAwG7ZSTJomYr -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:31 2025 by rpki-client